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Abstract 

A quantum key distribution scheme based on the use of squeezed states 
is presented. The states are squeezed in one of two field quadrature com- 
ponents, and the value of the squeezed component is used to encode a 
character from an alphabet. The uncertainty relation between quadra- 
ture components prevents an eavesdropper from determining both with 
enough precision to determine the character being sent. Losses degrade 
the performance of this scheme, but it is possible to use phase sensitive 
amplifiers to boost the signal and partially compensate for their effect. 

1 Introduction 

Quantum cryptography provides a means of sending a secure message, and it 
does this by allowing one to establish a secure key. In all but the simplest codes, 
what is sent is not only the coded message, but also a key which tells the receiver 
how to decode the message. The coded message can be sent through a public 
channel, but the key must be sent through a secure one. Quantum mechanics 
allows one to construct a channel in which the presence of an eavesdropper 
can be detected ]l|]-j§. The key can be sent through this channel, and if no 
eavesdropping is found, the key will be secure. Working quantum cryptographic 
systems have been constructed in several laboratories 

The quantum cryptographic schemes proposed so far have all involved the 
transmission of single particles. For example, in one scheme, single photons are 
sent down an optical fiber, and information is carried by the polarization of 
the photons. Experimental implementations of this method use weak coherent 
pulses rather than single photons. Losses limit the distances over which this 
method can be used; if the fiber is too long, the probability of the photon 
emerging from the fiber without being absorbed is small. Amplifiers cannot be 
used to boost the signal, because they destroy the quantum coherence which is 
essential for the method to work. A second approach, which also suffers from 
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this limitation, uses weak, overlapping coherent states |§-|ll]- In this case, the 
information is encoded in the phase of the coherent state. 

One possible way around the limitation imposed by losses is to use pulses 
consisting of more than one photon. Care, however, is required, because the 
eavesdropper may siphon off enough of the pulse to learn what information it is 
carrying, but send the rest of the pulse on its way. It has been shown by Ralph 
that multiphoton pulses in coherent states are vulnerable to this kind of attack 
[ EJI . It is necessary to use pulses for which this kind of eavesdropping will not 
work. 

Recently Ralph has presented a method of using squeezed states for quantum 
cryptography In this scheme sequences of symbols are impressed on two 
squeezed beams by Alice. The beams are then mixed at a beam splitter, and the 
mixed beams, along with a local oscillator for each, is sent to Bob. A random 
phase delay is introduced into one of the beams and its local oscillator in order to 
destroy the phase coherence between the two beams. Bob, by using both beams 
and their local oscillator signals, can, by using homodyne detections, recover 
one of the two sequences but not both. An eavesdropper is in the same position 
as Bob, but she does not know which sequence Bob will read, and if she uses 
a capture-resend strategy, every time she guesses incorrectly, she will introduce 
detectable errors. The squeezing prevents her from gaining useful information 
by splitting off parts of the beams. 

Here we shall investigate a different scheme based on squeezed light. Alice 
sends displaced squeezed vacuum states to Bob which are squeezed in one of 
two orthogonal field quadrature components. Bob chooses at random which of 
the components to measure. The security of this method of transmission is a 
result of the uncertainty relation for field quadrature components. The effect of 
loss is examined, and it is found that its effect can be partially compensated by 
using degenerate parametric amplifiers to boost the signal. This method should 
be secure against the capture-resend strategy and a strategy which employs a 
beam splitter to sample part of the signal. In the latter case, it is the vacuum 
noise which presents a major problem for the eavesdropper. 

2 Procedure 

A single-mode classical field is characterized by a complex amplitude, or equiv- 
alently, by its real and imaginary parts, which we shall designate by x\ and 
X2-, respectively. Quantum mechanically, the complex amplitude corresponds 
to the mode annihilation operator, a, and the real and imaginary parts to the 
operators X\ and X2, respectively, where 



These operators do not commute and obey the uncertainty relation (h = 1) 



X x = -{a)+a) 



a). 



(1) 




(2) 



2 



This uncertainty relation implies that X\ and X 2 cannot both be defined to 
arbitrarily high accuracy for a given quantum state. Is is this fact which will 
form the basis of our quantum cryptography system. 

It is often useful to represent quantum states in a phase space whose axes 
are X\ and x 2 . The state is pictured as a point surrounded by an error box. The 
point is located at x\ — (X\) and x 2 = (X 2 ), and the error box represents the 
fluctuations of the amplitude about its mean value. For a coherent state, the 
error box is a circle of radius 1/2, while for a minimum uncertainty squeezed 
state, it is an ellipse whose minor axis is parallel to the direction of the squeezing. 
The area of the ellipse is the same as that of the circle. Its shape, however, allows 
us to have one of the variables, say X\, very precisely defined, while the other, 
X2, is very poorly defined. 

In explaining how this can be used to send a message, we invoke the usual 
cast of characters which appears in discussions of quantum cryptography, Alice, 
Bob, and Eve. Alice wants to establish a key with Bob, and Eve wants to 
intercept it without being detected. Alice and Bob use the following method 
to set up a shared key. The x\ and x 2 axes are divided up into bins of size 5, 
where S < 1/2. Each bin corresponds, by previous agreement, to a symbol in an 
alphabet. The key will consist of a sequence of symbols from this alphabet. For 
example, a not very efficient choice of alphabet would be would be the symbols 
and 1, and every other bin could represent while the intervening ones represent 
1. A more efficient choice would be to use a larger alphabet. 

Alice now sends to Bob one of two kinds of squeezed states. The first kind 
can be represented by an ellipse which is centered on the x\ axis and is squeezed 
in the x\ direction to a width considerably less than S. This type of state has 
very well-defined x\ value but a poorly defined x 2 value. The second kind is 
represented by an ellipse which is centered on the x 2 axis and is squeezed in 
the x 2 direction, also to a width considerably less than <5. This state has a 
well-defined x 2 value but a poorly defined x\ value. We shall call the first kind 
of state an x\ state and the second kind an x 2 state. 

The number of bins on each axis depends on the length of the ellipses. Let 
Sx ma j be the length of the major axis of the ellipses representing the x\ and x 2 
states (it is assumed to be the same for both). On the x\ axis, the bins run from 
—5x ma j/2 to 8x ma j/2, and have the same range on the x 2 axis. This means 
that the collection of all x\ states, each centered in a particular bin on the x\ 
axis, covers the same region of phase space as does the collection of x 2 states. 
Therefore, an eavesdropper cannot determine whether a state is an x\ or an x 2 
state from the result of a single measurement of X\ or X 2 . 

Alice now decides at random whether to send an x\ or an x 2 state, and Bob 
decides, also at random, whether to measure Xi or X 2 . This measurement can 
be performed by using homodyne detection. Alice and Bob then communicate 
with each other via a public channel. For each state which Alice sent, she tells 
Bob what kind of state, x\ or x 2 , it was, and Bob tells Alice what kind of 
measurement he made. Alice does not tell Bob the X\ or X 2 values of the 
states she sent, and Bob does not tell Alice the results of his measurements. 
After this public communication, Alice and Bob keep the results for which Bob 
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made a measurement corresponding to the state which Alice sent, e. g. when 
Alice sent an x\ state and Bob measured X\, and discard the others. For each 
of these transmissions, Bob knows the value of the variable, x\ or x%, which 
Alice sent so they both know which bin the state falls in. They then assign to 
this transmission the alphabet symbol corresponding to this bin. The result is 
a sequence of symbols which can be used as a key. 

Why is this key secure? In order to know which bin a given state falls into, 
Eve must be able to determine either x\ or X2 to an accuracy of at least 6. 
The problem is, she does not know which measurement to make, and she is 
forbidden by the uncertainty principle from measuring both to the necessary 
accuracy. She must choose to measure X\ or X 2 if she wishes to determine 
the key symbol, and if she chooses the wrong one, she gains no information and 
disturbs the message. This disturbance can be detected by Alice and Bob. They 
can compare a subset of the transmissions for which they should agree. If they 
find errors, i. e. if they find they do not agree on some of these symbols, they 
can conclude there was an eavesdropper present. 

Let us now see how small 6 needs to be, and how much squeezing we need. 
For a squeezed vacuum state, squeezed in the x% direction, the probability dis- 
tribution for the observable Xi is given by (see Appendix A) 

p(xi) = (xi\p sqvac \xi) = —^=e~ Xl/v , (3) 



where p sqvac is the density matrix corresponding to the squeezed vacuum state, 
v = (l/2)e~ 2r , and r > is the squeezing parameter (r = corresponds to the 
vacuum state which is not squeezed). The probability, p$, that x% lies in the 
interval [—6/2,6/2] is 



Ps 



6/2 

dx ie - x i /v = erf ( ) , (4) 



Itxv Jq \2y/v 
where erf(x) is the error function and is given by 



erf(cc) = — / die" 1 . (5) 



(i 



Suppose we want the probability of making an error, i. e. the probability of 
finding x% outside the inverval [—6/2,6/2], to be less than 10 -3 . We find that 



1 - erf (2. 51) = 3.9 x 1(T 4 |13J, so that if 

6 > 5.02y/v, (6) 

then the error probability will be less than 10 -3 . If we choose 6 to be 1/8, then 
we can choose v = 6.2 x 10~ 4 which implies that the squeezing parameter is 
3.3. Because the number of photons in a squeezed vacuum is (a^a) = sinh 2 r, 
the number of photons in this state is 200. The width of the state in the xi 
direction is just e r /2 which is, with our choices, 14, and this implies that in 
that direction the state has substantial overlap with approximately 110 bins. 
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This means that if we measure the state in the X\ direction we can determine 
with very good probability which bin it lies in, but if it is measured in the x^ 
direction, the result is essentially random. 

3 Effect of Losses 

As the light travels down a fiber it will experience losses and this will degrade 
the squeezing. These losses can be described by the master equation 

= ^{2apa) — a) ap — pa) a). (7) 

Here p is the density matrix of the field and 7 is the loss rate. In order to find 
the density matrix at the end of the fiber, one solves this equation for p(t) and 
sets t = T = L/c, where L is the length of the fiber. There are a number of 
ways to solve this equation one of which is discussed Appendix B. The result 
for p(x\) at the output of the fiber is again given by Eq. (||), but now 

o = i[(l-e-^)+e-^e-n (8) 

The probability of finding x\ within a bin of size 8 is still given by Eq. (Q), 
but with the new value of v. For a given value of p$, or, equivalently, a given 
error probability, this relation gives a bound on the size of the loss which can 
be tolerated. Note that even if the initial squeezing were infinite (a physical 
impossibility, because this would require infinite energy), the size of the accept- 
able loss is finite, and, in fact, quite small. For example, for an error probability 
of less than 10~ 3 , with the same value of 5 as above, we can again choose 
v = 6.2 x 1CT 4 which gives us that that 7T < 1.2 x 10~ 3 or for a fiber of length 
one kilometer, a maximum loss of 1.2 x 10~ 6 per meter. 

It is possible to use a degenerate parametric amplifier to partially compensate 
for the effect of losses. In order to see how this works, we shall compare the 
action of a fiber of length L = Tc to that of two fibers of length L/2 with a 
degenerate parametric amplifier, with gain G > 1, between them to boost the 
signal. We shall consider what happens to an x\ state, the effect on an xi state 
is similar. 

In the case of the fiber of length L we have that 
(XrCT)) = e-^AMO)}, 
AAi(T) 2 = e-T T AXi(0) 2 + ^(1 - e" 7T ). (9) 

Because we wish to find which bin the initial state is in, we define a variable 
£ = e< T / 2 Xi{T) which has the property that 

(0 = <*i(o)>, 

A£ = [AA^Of + ^e^-l)] 1 / 2 . (10) 
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A measurement of £ will tell us with high probability which bin the original 
state was in if A£ is considerably smaller than 5, or 

A£ < aS, (11) 

where s < 1, and its actual size is determined by the probability of error which 
we can tolerate. In order to satisfy this condition the loss must be such that 

e T T - 1 2 7 T < A[(s6) 2 - AX 1 (0) 2 ] . (12) 

Now let us look at the case with the amplifier. After the first fiber we have 

(X 1 (T/2)) = e-^/^CO)), 

AXi(T/2) 2 = e-' rT/2 AA 1 (0) 2 + i(l-e- 7T/2 ). (13) 

The amplifier can be set to amplify either X\ or X2', if it amplifies X\, then 
X\ — > GX\ and X2 — > (l/G)X2, while if it is set to amplify X2, then X\ — » 
(l/G)Xi and X2 — > GX2. Let us suppose that it is set to amplify Ai which has 
the effect of multiplying the right-hand side of the first of Eqs. (|l3|) by G and 
the second by G 2 . Finally, after the second fiber we have 

{X 1 (T)) = Ge-^iXAO)), 
AX^Tf = G 2 e^ T AA 1 (0) 2 + iG 2 e^ T / 2 (l-e^ T / 2 ) 

+|(1 -e-^ 2 ). (14) 

Again we are interested in the value of X\ at the beginning of the first fiber, so 
we define 

ii = ^ T/2 *i(T), (15) 

which implies that 

(a) = (Xi(o)>, 

A6 = [AXm 2 +\{e^-l) + ^ T {l-e-^)fl\ (16) 

In the limit of large gain, the requirement on the loss so that A£i < sS is that 
(for 7 T < 1) 

7 T<8[( S ,S) 2 -AX 1 (0) 2 ], (17) 

a less stringent requirement by a factor of two over the single long fiber. There- 
fore, the amplifier, by boosting the signal, has reduced the effect of the losses. 

It remains to be seen what happens if the amplifier is set to amplify X2 , and 
an Xi state is sent. In that case we define the variable 

6 =Ge"> T / 2 X 1 (T), (18) 
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which has the following properties: 



(£2) = (Xi(0)), 



A6 = [AX 1 (Of + ±{e^ 2 -l) + ±&e^(l-e-T T ' 2 )] 1 / 3 . (19) 
In the high gain limit the requirement on the losses is 

JT<8 { -^. (20) 

This is a much more stringent requirement on the losses that that imposed by 
the single long fiber. 

This analysis suggests that Alice and Bob should use the following protocol 
if a fiber with amplifiers is to be used. Alice decides at random whether to 
send an x\ or an xi state and independently decides, also at random, whether 
the amplifiers should amplify X\ or X%- She then sends the state, and Bob 
measures either X\ or X^, with this choice being again random. If Alice and 
Bob make the same choice, and the amplifiers are set the same way, e. g. both 
decide to measure X\ and the amplifiers also amplify X\, then they can use 
that transmission, otherwise they discard it. 

If the amplifier settings are secure, then this procedure can be simplified and 
Alice can set the amplifiers in accord with the state she sends. On the other 
hand, if they are not, and Eve knows which quadrature component is being 
amplified, then the random setting is necessary. There is, in addition, a limit on 
the gain of the amplifiers which follows from the fact that Alice and Bob must be 
able to use the cases in which Alice's preparation and Bob's measurement agree, 
but the amplifier is set incorrectly, to detect the presence of the eavesdropper. 

If Alice and Bob can only use the cases in which everything agrees, prepara- 
tion, amplifier setting, and measurement, to detect Eve, then she has a successful 
eavesdropping strategy which cannot be detected. Eve simply determines which 
quadrature is being amplified, measures that quadrature, and and sends a state 
which agrees with the result of her measurement on to Bob. Using this strategy 
Eve will only make incorrect measurements when the amplifier is set to am- 
plify the wrong quadrature component, in which case that transmission will be 
discarded anyway. Thus, it is essential that Alice and Bob be able to examine 
the transmissions for which their preparation and measurement agree, but the 
amplifier is set incorrectly, and see the effect of Eve's measurement. 

Let us now see what kinds of restrictions this requirement imposes. In the 
case in which the amplifier is set properly, we want the third term in the brackets 



in the second of Eqs. (16) to be much smaller than the other two. This implies 
that we need 



2 ^ IT 



Ax 1 (oy » Q1 

IT » (21) 
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The second of these inequalities implies that we simply need G 2 ^S> 1, and if 
we assume that AXi(O) ~ sS, and in addition assume that the requirement 
in Eq. ( Jl7| ) is obeyed, then the first of the above inequalities also reduces to 
G 2 3> 1. Now let us see what happens when the amplifier is set incorrectly. 
With no intervention by Eve, we have that A£ 2 ~ G. If, however, Eve makes an 
incorrect measurement, then the uncertainty in the result of her measurement 
will be of order l/(sS). This uncertainty will be reflected in the state she sends 
to Bob, and consequently he will find A£ 2 ~ V( s< 5)- If G is chosen so that 

G 2 >1 G<i, (22) 

so 

then even by examining the cases in which the amplifier is set incorrectly, Alice 
and Bob can, by comparing their results, tell whether an eavesdropper was 
present. 

4 Eavesdropping 

Let us now consider two possible methods of eavesdropping on this system. The 
first is just the capture-resend strategy, and the second involves using a beam 
splitter to split off part of the signal, and performing measurements on that 
part to gain information about the signal. In both cases, we shall find that the 
intervention of the eavesdropper is detectable. 

In the capture-resend strategy, Eve measures the entire signal, and then, on 
the basis of her measurement result, prepares a second state which she sends on 
to Bob. Her problem is that she does not know whether she should measure X\ 
or X2, and, if 5 is chosen small enough, she will introduce errors if she chooses 
incorrectly. 

If 5 is chosen too large, in particular, larger than 1/2, Eve has a straightfor- 
ward eavesdropping strategy. She can measure both X\ and X2 to an accuracy 
of approximately 1/2. This can be accomplished either by splitting the signal 
into two parts using a 50-50 beam splitter and measuring X\ at one output and 
Xi at the other |L4j , or by amplifying the signal, so that it becomes essentially 
classical, and performing measurements on it Jig ] . After performing these mea- 
surements, she sends a coherent state to Bob which is centered on the results of 
her measurement. That is, if she obtained results x^ and x 2 m \ the coherent 
state she sends can be visualized as a circle of radius 1/2 in the X1-X2 plane with 
its center at the point {x^, x^). When Alice announces which kind of state 
she sent, Eve knows which of her results, a;^ or x 2 m ' ) , to use, and Alice and 
Bob will not be able to detect the eavesdropping. This is because the coherent 
state which Eve sent to Bob will have the correct value of x\ for an x\ state and 
the correct value of x-i for an x 2 state, and both with sufficiently high accuracy 
that Bob will assign the result of his measurement to the correct bin. Therefore, 
it is necessary to choose 5 smaller than 1/2 in order to foil this strategy. 

If 8 has been chosen considerably smaller than 1/2 the above strategy no 
longer works, because Eve can no longer determine both X\ and X2 to the 
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desired accuracy, i. e. 6. She will have to choose which to measure, and after 
making the measurement, will send to Bob a state squeezed in the direction 
which she chose centered on the result of her measurement. If, however, she 
made the wrong choice, the state she sends to Bob will be squeezed in the 
wrong direction and centered on the wrong point. This will introduce errors, 
which, by comparing a subset of the results on which they agree, i. e. Bob's 
measurement corresponded to the kind of state which Alice sent, Alice and Bob 
can detect the eavesdropping. 

Let us now suppose that S has been chosen sufficently small, and that instead 
of measuring the entire signal, Eve uses a beam splitter to sample a part of it. 
She sends on to Bob the part of the signal which is transmitted through the 
beam splitter and performs measurements on the part which is reflected. We 
would like to see how much she can learn, and how much she disturbs the signal 
state. We shall call the two modes which the beam splitter couples modes 1 and 
2, and the signal will go into the input port for mode 1 and the vacuum into the 
input for mode 2. The relation between the input and output operators is Jl6[ 

where U is the unitary operator which implements the beam-splitter transforma- 
tion, and R and T are the reflection and transmission coefficients, respectively. 
These have to be chosen in such a way that we minimize the disturbance to 
the signal state, but, nevertheless, gain some information about it. We shall 
suppose that Alice has sent an X\ state, and see what happens both in the case 
Eve makes an Xi measurement and in the case she makes an X 2 measurement. 

Now suppose that Alice has sent an X\ state centered on x\ = s with squeez- 
ing parameter r, and let a = e~ r . Eve inserts the beam splitter and measures 
Xi at the mode 2 output port. We shall denote by Xjk the operator Xj for 
the kth mode, where both j and k can be either 1 or 2. We shall also drop 
the superscript (in) on all in operators with the understanding that operators 
without a superscript are in operators. From Eq. fl23| ) we have that for initially 
uncorrelated modes 

(x[ 2 ut) ) = Vf{X 12 ) - VR{Xu) 
(Ax[° ut) ) 2 = T(AX 12 f+R(AX 11 ) 2 , (24) 

or for our input state, 

(a|° u4) ) = -Vrs 

(Ax[° ut) ) 2 = \(T + Ra"). (25) 

This last equation tells us about the information gain from Eve's measurement. 
In order to learn about Alice's state with some degreee of accuracy, Al{™^ 
cannot be too large which, in turn, implies that the reflection coefficient cannot 
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be too small. If it is, the noise from the vacuum state obscures the information 
carried by the signal state. In particular, if we define £12 = —X^^/^/R, then 
we have 

(£12) = s 

(M12) 2 = l(^+- 2 )- ( 26 ) 

From this equation it is clear that if we want to determine x\\ with an accuracy 
of order 5, then we must have ^JT/R of order 6. 

Let us now see what is the effect of Eve's measurement on the transmitted 
signal state. In the xi representation the initial wave function of the system is 
(see Appendix A) 

I*) =il> Xl (x n )(f> vac (xi 2 ), (27) 
where ^ 

%i{*n) = (J^) e-K a "->/*] a , (28) 



is the wave function of the x\ state, 

^oocM = \ z) z~ Xl \ (29) 

is the wave function of the vacuum state, and Xu is the x\ coordinate for mode 
1 and x\2 is the X\ coordinate for mode 2. After the beam splitter the wave 
function is (see Appendix A) 



2 



7TCT 



1/2 



If Eve now measures X12 and obtains the result y, the wave function becomes a 
product of a wave function in mode 1 and an "eigenstate" of X12 with eigenvalue 
y in mode 2. The mode 1 wave function, ipy(%u) is then 



ipy(xu) = iVexp 



r2 



it m — 



T + Ra 2 



(31) 



where iV is a normalization constant. This is the wave function which will be 
sent on to Bob. Comparing Eqs.(p8|) and (|3l| ) we see that there are two effects 
of the measurement on the wave function. First, the center of the Gaussian has 
shifted, and, second, its width has changed. We want both of these changes to 
be small. 

As a result of the beam splitter and measurement, the width has changed 
as follows: 

°^ (T + Z>R)W (32) 
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In order for this change to be small, it is necessary that T be of order one. The 
shift in the center of the Gaussian is given by 



VT( S + Vr(i - <j 2 )v) 
s ~* tT^r (33) 

Note that if T = 1 the center suffers no shift while if T = it is shifted all 
the way to zero. This clearly implies that in order to produce a small change 
we want T to be close to one. Assuming this to be the case, which means that 
i£ <C 1, and also that a is small, we find that the shift, As, is given by 

As = ~sR + yVR. (34) 

Now y is random, but will typically be of order — \fR~s (see Eq. (p5|)) so that if 
the shift is to be less than S in magnitude, we must have 

sR < 5. (35) 

However, s can be anywhere between — 1/tr and 1/ct, so that we need to require 
that 

R < aS, (36) 

which is a very stringent requirement. 

Comparing the requirements for information gain and small disturbance, we 
see that they are incompatible. Information gain requires a small transmission 
coefficient, while a small disturbance requires a transmission coefficient close 
to one, and there is no overlap in the permitted ranges. Therefore, using this 
method, if Eve diverts enough light to gain useful information, she will also 
produce a detectable disturbance. The real problem for Eve is the vacuum 
noise. If she samples only a small part of the signal, in order to minimize the 
disturbance, what little signal she sees is swamped by vacuum noise. 



5 Conclusion 

A method for using squeezed states to perform quantum key distribution has 
been presented. It relies on the uncertainty relation for field quadrature compo- 
nents for its security. As with other methods, it is adversely affected by losses, 
but it is possible in this case to use amplifiers to reduce their effect. Wc have 
shown that this method is secure against several eavesdropping strategies, but 
have not presented a general proof of its security. 

Squeezed states are an example of a nonclassical field state, that is a state 
whose photodetection properties cannot be simulated by a classical stochastic 
field. They have proven to be useful for teleportation [0-(l9| and now for 
quantum cryptography as well. This leads one to ask whether other kinds of 
nonclasical states could prove useful in quantum information, and suggests that 
this should be a fruitful line of research. 
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Appendix A 

Here we present several facts about squeezed states and beam splitters which 
are needed in the rest of the paper. Squeezed states are discussed in several 
recent textbooks on quantum optics, and these provide a good background for 
the subject 

A squeezed vacuum state is obtained from the vacuum by applying the 
squeeze operator 

\$) = S(z)\0), (37) 

where 

S(z) = exp[(z(a t ) 2 - z*a 2 )/2}. (38) 
Setting z = re 1 ^ we have that 

S(z)~ 1 aS(z) = acoshr + aV^sinhr 

S(z)aS(z)- 1 = acoshr- aV^sinhr. (39) 

We can use these relations to hnd an explicit expression for |$) in the X\ 
representation, i. c. the representation of |$) given by (xi|4>), where \x\) is an 
eigenstate of X\ . In this representation 

Xx^xi X 2 ^- 1 -^-, (40) 
2 dxi 

which implies that 

Id + Id 

2 dxi 2 dxi 

The state |<I>) satisfies the equation 

S(z)aS(z)- 1 \<i>) = 0, (42) 
and using Eqs. ( |39| ) and (^lj) to put this in the x\ representation we find 
= [(coshr — sinhr)xi 

" 1 (xi\*)- (43) 



- - (cosh r + e 1 ^ sinh r) — — 
2 dx\ 



This equation is easily solved, and in the case <p — w, which corresponds to 
squeezing in the X\ direction, we find, after normalization, that 

= f^-V /4 exp[-( 2 ; 1 / e -'-) 2 ]- (44) 
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In order to obtain the wave function of a squeezed vacuum state which has been 
shifted by s in the x\ direction, we simply replace x\ by x\ — s in the above 
equation. 

Next we would like to see how wave functions in the xi representation 
are transformed under the action of a beam splitter. Let our initial state be 
(xu, xi 2 \^} = {x\i, Xxi), then our task is to find 

^out(x n ,x 12 ) = (x n ,x 12 \UV), (45) 

where U is the beam-splitter transformation given in Eq. (|23|). We first note 
that ?7 -1 |a;ii, X12) is an eigenstate of U~ 1 XnU with eigenvalue in, and of 
U~ l X\ 2 U with eigenvalue x\ 2 - From Eq. ( p^ ) we have 

U^XnU = VTX n + VRX 12 

U- l X 12 U = -VRX n +VTX 12 , (46) 

so that 

U~ l \xu,xa) = \VTx11 - VRxu^VRxh + VTxi 2 ). (47) 
Therefore, we have that 

^out(xn, X12) = ^in(VTxu - VRX12, VRxu + VTx 12 ). (48) 



Appendix B 

We want to find the solution to the master equation, Eq. (^). There are 
a number of ways of doing this, most of which involve turning the operator 
equation into a c-number equation. We shall use the master equation to derive 
an equation for the symmetrically-ordered field characteristic function, which 
for a single-mode field is given by 

X (0 = Tr(D(Op), (49) 

where D(£) = exp(£a^ — £*a). using the relations 

+ = -Trp(£M 

= -Tr(D(t)pa), (50) 
we can transform the master equation into a partial differential equation for 



at 2\^ + C W + lClx] - (51) 
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Defining x'(£) = ex P(l£| 2 /2)x(£)> we nn d that x'(£) satisfies 



5x' 



at 



2 v 



*a^ 
ae* 



) 



(52) 



whose solution is given by 



(53) 



This implies that 



exp[-(l 



e- 7 *)ie| 2 /2]x(e-^,0). 



(54) 



Our next task is to relate the characteristic function to the x\ distribution 
of the density matrix. If we let q and p be the real and imaginary parts of £, 
£ = q + ip, then 



Setting g = 0we see that (xi\p\xi) is just the Fourier transform of x{p)> so 



In order to find {x\ \p(t)\x\) for an initial squeezed vacuum state, we first 
use Eq. ( |55| ) and the results of Appendix A to find x{p) at t = 0. We then use 
Eq. @ to find x(p,*), and finally, Eq. (||) to find (xi\p(t)\xi) . 
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